Nathaniel Wesley Filardo
af9abf95c9
cqueues: lua-5.3, 5.4 variants
...
Build upstream's support for lua 5.3 and 5.4
Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com >
2025-10-25 08:46:34 +03:00
Nathaniel Wesley Filardo
1e60fd049a
luaossl: lua-5.3, 5.4 variants
...
Build upstream's support for lua 5.3 and 5.4
Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com >
2025-10-25 08:46:14 +03:00
Josef Schlehofer
f182a567aa
python-hatch-requirements-txt: bump to 0.4.1
...
Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2025-10-22 12:54:31 +02:00
Tianling Shen
23c3d208e8
golang: Update to 1.25.3
...
go1.25.2 (released 2025-10-07) includes security fixes to the
archive/tar, crypto/tls, crypto/x509, encoding/asn1, encoding/pem,
net/http, net/mail, net/textproto, and net/url packages, as well as
bug fixes to the compiler, the runtime, and the context, debug/pe,
net/http, os, and sync/atomic packages.
go1.25.3 (released 2025-10-13) includes fixes to the crypto/x509
package.
Changelog: https://go.dev/doc/devel/release#go1.25.minor
Fixes:
- CVE-2025-47912
- CVE-2025-58183
- CVE-2025-58185
- CVE-2025-58186
- CVE-2025-58187
- CVE-2025-58188
- CVE-2025-58189
- CVE-2025-61723
- CVE-2025-61724
- CVE-2025-61725
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-10-20 22:56:05 +08:00
Michael Heimpold
dd9c6ecd31
php8: update to 8.4.13
...
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
2025-10-16 22:41:37 +02:00
Luiz Angelo Daros de Luca
89cbbf6f26
ruby: update to 3.4.6
...
Ruby 3.4.6 is a routine update that includes bug fixes.
Changelog: https://github.com/ruby/ruby/releases/tag/v3_4_6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com >
2025-10-14 13:31:13 +02:00
Etienne Champetier
759f303897
lua-cjson: bump minimum cmake version to 3.10
...
Starting cmake 4.0, anything under 3.5 produces an error, see
https://cmake.org/cmake/help/latest/command/cmake_minimum_required.html#policy-version
Use a patch instead of CMAKE_OPTIONS so we don't forget to remove this hack.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com >
2025-10-09 15:12:20 -04:00
Jianhui Zhao
33ecb64165
lua-eco: update to 3.13.0
...
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.13.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com >
2025-10-06 12:07:09 -03:00
George Sapkin
d856cb45e3
python-trove-classifiers: bump to 2025.9.11.17
...
Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases
Signed-off-by: George Sapkin <george@sapk.in >
2025-10-03 12:11:54 +02:00
Wei-Ting Yang
c6ba0ce292
python-urllib3: update to 2.5.0
...
Changelogs can be found in https://github.com/urllib3/urllib3/releases .
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
2025-10-02 08:17:48 +02:00
Wei-Ting Yang
7289cb0119
python-packaging: update to 25.0
...
Changelogs can be found in https://github.com/pypa/packaging/releases .
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
2025-10-02 08:17:48 +02:00
Josef Schlehofer
4d521dfbeb
python-hatchling: update to version 1.27.0
...
Release notes:
https://github.com/pypa/hatch/releases/tag/hatchling-v1.27.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2025-10-01 08:35:00 +02:00
George Sapkin
6408f9ef6e
python-atomicwrites: drop package
...
- archived upstream
- drop confirmed by Python maintainer
- last local commit:
commit: d5ac6e103e
Author: Jeffery To <jeffery.to@gmail.com >
Date: Mon, 24 Jul 2023 22:46:41 -0700
python-atomicwrites: Update to 1.4.1
Link: https://github.com/openwrt/packages/pull/26400#issuecomment-2848164601
Signed-off-by: George Sapkin <george@sapk.in >
2025-09-23 13:11:55 +02:00
Alexandru Ardelean
5e1d07b162
numpy: bump to version 2.3.3
...
Bump the version number to 2.3.3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
2025-09-23 12:03:36 +03:00
Fabrice Fontaine
76ff404bc3
python-cryptography: fix PKG_CPE_ID
...
cryptography_project:cryptography has been deprecated in favour of
cryptography.io:cryptography:
https://nvd.nist.gov/products/cpe/detail/2EBA50FC-F3F9-40D5-82BD-EFB67F761153
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
2025-09-20 23:13:41 +08:00
Tianling Shen
4c8c41c023
rust: Update to 1.90.0
...
Release note: https://blog.rust-lang.org/2025/09/18/Rust-1.90.0/
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-09-19 20:24:26 +08:00
Luiz Angelo Daros de Luca
4410c80283
ruby: update to 3.4.5
...
Ruby 3.4.0 is a major release that introduces several changes:
- Adds `it` block parameter reference
- Switches default parser to Prism
- Implements Happy Eyeballs Version 2 in the socket library
- Improves YJIT
- Adds Modular GC
- And more (see changelog for full details)
Subsequent minor releases include:
- 3.4.1: fixes version description
- 3.4.2: routine bugfix release
- 3.4.3: routine bugfix release
- 3.4.4: routine bugfix release (Linux-specific)
- 3.4.5: routine bugfix release, adds GCC 15 support
Packaging changes:
- (NEW) ruby-repl_type_completor (packaging the repl_type_completor gem)
- Refreshed package dependencies
- Updated `ruby_missingfiles` (detects unpacked files) to use `apk`
- Refactored `ruby_find_pkgsdeps` (detects inter-package dependencies)
to use the Ruby parser (Prism) instead of heuristic string matching
Changelog: https://www.ruby-lang.org/en/news/2024/12/25/ruby-3-4-0-released/
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com >
2025-09-18 22:17:26 +03:00
Sandro Jäckel
e4b9245fcf
golang: update to 1.25.1
...
Fixes: CVE-2025-47910
Link: https://github.com/golang/go/issues?q=milestone%3AGo1.25.1%20label%3ACherryPickApproved
Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com >
2025-09-16 22:04:00 +08:00
Jianhui Zhao
7c9184315b
lua-eco: update to 3.12.0
...
A new module `shared` added since this version.
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.12.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com >
2025-09-15 20:10:05 -03:00
Tianling Shen
a5c3fd1fee
rust: add loongarch64 and powerpc to supported targets
...
Also removed i686 as OpenWrt replaces it with i386 in $(ARCH).
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-09-12 14:46:43 +08:00
Aleksey Vasilenko
06bc7784ce
erlang: update to 28.0.3
...
- Takeover maintainership
- Enable parallel build
- Depend from libstdcpp only on JIT-enabled platforms (x86_64 and aarch64)
- Add SCTP support (off by default)
- Remove OTP-internal versions and rely on package versions for sub-packages
- Remove obsolete configure vars
- Move out sasl from erlang package into separate erlang-sasl
- Add more sub-packages
- erlang-diameter
- erlang-eldap
- erlang-ftp
- erlang-odbc
- erlang-parsetools
- erlang-tftp
- Rename erlang-os_mon to erlang-os-mon
- Clean-up descriptions text
- Disable MIPS16 again to fix mips* targets
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com >
2025-09-12 14:46:13 +08:00
Michael Heimpold
69e9d5c560
php8: update to 8.4.12
...
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
2025-09-06 20:11:29 +02:00
Luiz Angelo Daros de Luca
59880e81a6
ruby: update to 3.3.9
...
3.3.9 release includes the following security fix of default gems:
- CVE-2025-24294: Possible Denial of Service in resolv gem
And the following fixes for build issues:
- GCC 15.1
- Visual Studio 2022 Version 17.14
3.3.7 and 3.3.8 are routine update that includes minor bug fixes.
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com >
2025-09-01 19:46:45 +03:00
Wei-Ting Yang
e236bede74
django-restframework: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:django-rest-framework:django_rest_framework
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
2025-08-29 11:56:26 +03:00
Rosen Penev
d9fee08632
python3: fix host uuid and ncurses
...
pkgconfig doesn't work correct for these two packages. Just readd the
proper paths.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2025-08-24 20:28:15 +03:00
George Sapkin
bfd3058770
golang: bump to 1.25.0
...
Fixes: CVE-2025-47907
Link: https://go.dev/doc/go1.25
Signed-off-by: George Sapkin <george@sapk.in >
2025-08-24 22:25:17 +08:00
Aleksey Vasilenko
10862df850
rust: update to 1.89.0
...
- switch source archive to tar.xz to save space and bandwidth
- refresh a patch
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com >
2025-08-23 13:28:18 +03:00
Michael Heimpold
465ad70688
php8: update to 8.4.11
...
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.11
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
2025-08-22 23:02:23 +02:00
Tianling Shen
84cb850b7f
rust: read build path from {HOST_}MAKE_PATH
...
Allow set build path by `{HOST_}MAKE_PATH`.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-08-21 17:00:09 +08:00
Tianling Shen
1000e99185
rust: introduce RUST_{HOST,PKG}_LOCKED flag
...
Introduce `RUST_{HOST,PKG}_LOCKED` flag (enabled by default) to respect
upstream lockfile. This can be disabled by setting it to 0 if you want
to have up-to-date dependencies.
This change also adds new `CARGO_{HOST,PKG}_ARGS` variable to pass extra
build arguments to cargo.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-08-21 17:00:09 +08:00
Austin Lane
f2d141912f
python-pyelftools: Update to v0.32
...
- Update pyelftools to version 0.32 (minor)
Signed-off-by: Austin Lane <vidplace7@gmail.com >
2025-08-19 07:48:45 +02:00
Nathaniel Wesley Filardo
99393c9ef8
lua-argparse: bump to luarocks' 0.7.1
...
Bump lua-argparse to the luarocks argparse 0.7.1 release.
Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com >
2025-08-17 19:09:11 +03:00
Wei-Ting Yang
6d9d0d2bf8
python-certifi: update to 2025.8.3
...
Fix CVE-2024-39689.
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
2025-08-15 23:24:03 -03:00
Wei-Ting Yang
dc6724fca5
python-certifi: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
2025-08-15 23:24:03 -03:00
Wei-Ting Yang
23646be59e
python-urllib3: update to 2.0.7
...
Fix CVE-2023-45803 and CVE-2023-43804.
Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
2025-08-14 15:48:28 +02:00
Josef Schlehofer
3686cbe417
python3: update to version 3.11.13
...
Release notes:
https://docs.python.org/release/3.11.13/whatsnew/changelog.html#python-3-11-13
Fixes CVEs:
CVE 2024-12718
CVE 2025-4138
CVE 2025-4330
CVE 2025-4517
Patch refreshed
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2025-08-14 15:48:04 +02:00
Alexandru Ardelean
12738a8eec
django: allow test.sh only for python3-django package
...
No idea how this worked before.
But the '/usr/bin/django-admin' is available only for python3-django
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
52620adeed
python-requests: bump to version 2.32.4
...
This change updates the Python requests package to version 2.32.4
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
2c2c7a9de4
numpy: bump to version 2.3.2
...
This change bumps numpy to 2.3.2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
2025-08-14 15:10:10 +03:00
Alexandru Ardelean
eecc9a97db
django-restframework: bump to version 3.16.1
...
This change updates django-restframework to 3.16.1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro >
2025-08-14 15:10:10 +03:00
Rosen Penev
7648e25568
perl-file-rsyncp: update to 0.76
...
Fix compilation with GCC15.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2025-08-14 11:59:36 +08:00
Fabian Lipken
79c293e91c
python-pycares: bump to 4.10.0
...
python-pycares: bump from version 4.8.0 to 4.10.0
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com >
2025-08-14 11:58:43 +08:00
Michael Heimpold
331c6bc7ca
php8: link PCRE2 JIT usage to actual library configuration
...
libpcre2's JIT support is controlled with a compile-time flag.
When PHP is compiled against it (external libpcre2 - not PHP's bundled
version) as in our use-case, then it tries to auto-detect whether
JIT support is enalbed or not - but this is done based on a guess
when cross-compiling.
So instead of guessing, we need to tell the actual OpenWrt configuration
of libpcre2 to PHP.
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
2025-08-09 22:29:01 +02:00
Richard Muzik
e09ffebce1
python-twisted: Update to 25.5.0
...
This update fixes CVE-2024-41810 and CVE-2024-41671 [1]. For the full
changelog see NEWS [2].
Additionally changed the way the test files are omitted from patch file
to filespec in the Makefile.
[1] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst#twisted-2470-2024-08-08
[2] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst
Signed-off-by: Richard Muzik <richard.muzik@turris.com >
2025-08-08 13:50:28 +02:00
Rosen Penev
d791c150fc
perl-xml-parser: fix host expat paths
...
expat is installed in host, not hostpkg.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2025-08-06 21:58:25 +08:00
Tianling Shen
c8ad05854d
golang: disable build for powerpc64
...
e5500 is the only powerpc64 target we have in tree, but it's not
supported by golang[1]. Since it's hard to opt e5500 out from the
supported arch list, simply remove powerpc64 from it for now.
1. https://github.com/golang/go/issues/19074
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
2025-08-04 12:50:19 +08:00
Vladimir Ermakov
7c289ead14
python: adjust with glibc and libcrypt-compat
...
Fix #27012
Signed-off-by: Vladimir Ermakov <vooon341@gmail.com >
2025-07-30 14:43:39 +02:00
Richard Muzik
63b3e10116
python-incremental: Update to 24.7.2
...
To see changes check NEWS [1].
[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst
Signed-off-by: Richard Muzik <richard.muzik@turris.com >
2025-07-30 11:51:29 +02:00
Jianhui Zhao
f931ddb99f
lua-eco: update to 3.11.0
...
changelog: https://github.com/zhaojh329/lua-eco/releases/tag/v3.11.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com >
2025-07-25 18:09:28 +08:00
Michael Heimpold
ae7cb49d6f
php8: update to 8.4.10
...
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
2025-07-21 23:10:18 +02:00